The fastest way to check who owns a domain name is ICANN’s free Registration Data Lookup Tool at lookup.icann.org. Type in the domain, and the tool returns the registrar, creation and expiration dates, nameservers, and, when it isn’t redacted, the registrant’s name and organization. Under current privacy rules, personal contact details are usually hidden, so a single lookup often won’t be enough. You’ll pair it with a few indirect methods to actually identify the person or business behind the site.
Run the Lookup at lookup.icann.org
Go to lookup.icann.org, type the full domain (for example, example.com), and hit search. The tool queries a global database and returns a formatted report with whatever registration data the registrar has made public.1ICANN Lookup. Registration Data Lookup Tool
Most registrars also offer their own lookup tool on their website. Formatting differs, but the underlying data comes from the same authoritative registries, so the answers should match. If a registrar’s page is easier to read, use that. If you want the neutral source, stick with ICANN’s portal.
What the Results Tell You
A lookup report packs several fields into one page. The ones that matter for identifying an owner are:
- Registrant. The person or organization that registered the domain. This is the legal owner, though it often reads “REDACTED.”
- Registrar. The accredited company through which the domain was registered, such as GoDaddy, Namecheap, or Cloudflare. You’ll need the registrar’s name if you ever have to send a legal notice.
- Dates. Creation, last updated, and expiration. A domain created in 2003 with steady renewals suggests an established owner. A domain expiring next month with no updates may be about to drop.
- Nameservers. The servers that route traffic to the site. These point to the hosting provider, which is a different party from the domain owner.
- Contact roles. Records can list separate administrative and technical contacts. The administrative contact handles business decisions; the technical contact manages server configurations.2ICANN. Registration Data Lookup Tool Frequently Asked Questions (FAQs)
Read the dates carefully. They shape whatever you plan to do next, whether that’s making a purchase offer, resolving a dispute, or simply confirming who runs a website.
Why the Owner’s Name Is Usually Hidden
If your lookup returns “REDACTED” where the name and address should be, nothing is broken. The European Union’s General Data Protection Regulation prompted a sweeping change in how registration data gets published. Since 2018, ICANN’s Registration Data Policy has required registrars to redact personal information from public results when privacy laws apply.3ICANN. Registration Data Policy Because registrars can’t easily tell which lookups come from EU-protected individuals, most apply redaction to everyone.
The hidden fields include the registrant’s name, street address, postal code, phone number, fax, and email. In place of the email, the registrar must provide either an anonymized contact form or a forwarding address so you can still reach the owner without seeing their real details.3ICANN. Registration Data Policy What usually stays visible: the registrar name, the dates, the nameservers, and sometimes the registrant’s country or state.
On top of that, many registrars now bundle WHOIS privacy protection for free with every registration. Cloudflare, Namecheap, NameSilo, and Porkbun all include it, and the industry is moving away from charging for it. When privacy protection is active, a proxy contact from the registrar appears in place of the owner’s details, adding another layer between you and the person you’re trying to identify.
Redaction doesn’t mean the data is gone. Registrars are required to collect accurate contact information from every registrant, and ICANN mandates that they deposit copies of their registration databases with an approved escrow agent.4ICANN. Registrar Data Escrow That data isn’t accessible to the public, though. Registrars generally disclose the underlying registrant only in response to a court order, a subpoena, or a formal domain dispute proceeding.
How to Identify an Owner When the Record Is Redacted
When the lookup gives you nothing but redacted fields, the work shifts to indirect methods. Several are effective on their own, and stacking them usually gets you a name.
Read the Website
The most overlooked step is just reading the site. An “About” or “Contact” page often names the business or the individual behind the domain. Terms of Service and Privacy Policy pages typically identify the specific legal entity (an LLC or corporation) responsible for the content, and that entity name can then be searched in state business registries to find the people behind it. Site content also tends to be more current than registration records, since businesses update their pages far more often than their domain contact details.
Use a Reverse Lookup
A standard lookup starts with a domain and returns the owner. A reverse lookup runs the other direction: you enter a person’s name, email, or organization, and it returns every domain associated with that information. This helps when you already have a partial lead, like a company name from a website’s footer, and want to see what else the same party owns. Several providers offer reverse tools, and their results depend on how much pre-redaction data they’ve indexed.
Check Historical Records
Privacy protections are relatively recent. Services like DomainTools have been archiving registration records since 1995, and older snapshots may still show the owner’s real name, email, or address from before redaction became standard. The Internet Archive’s Wayback Machine can also help: if an earlier version of the website listed contact information or a company name, those archived pages may still be reachable even after the current site has been scrubbed.
Go Through a Broker
If your goal is to buy a privacy-protected domain rather than just identify the owner, a domain broker can reach out on your behalf. The broker uses the anonymized forwarding address or contacts the registrar directly, then negotiates terms. Commissions typically run between 10% and 30% of the sale price, and some brokers charge a retainer upfront. This route makes the most sense for higher-value domains where you can’t get through any other way.
If the Owner Is Using Your Trademark
Sometimes the reason you’re checking ownership is that someone has registered a domain using a name you own. Two legal tools cover that situation.
The Uniform Domain-Name Dispute-Resolution Policy (UDRP) is an expedited arbitration process run through ICANN-approved providers such as the World Intellectual Property Organization. To win, you have to prove all three of these: the domain is identical or confusingly similar to your trademark, the registrant has no legitimate interest in it, and it was registered and used in bad faith.5ICANN. Uniform Domain-Name Dispute-Resolution Policy The UDRP works well for straightforward cybersquatting. It works poorly for broken business relationships (where the domain started out legitimate) or for pure speculation on generic words. The only remedy is transfer or cancellation of the domain; there is no monetary award.
For damages, the Anticybersquatting Consumer Protection Act (ACPA) is the stronger option. It applies when someone registers, uses, or traffics in a domain that’s identical or confusingly similar to a distinctive or famous trademark, with a bad faith intent to profit.6Office of the Law Revision Counsel. 15 USC 1125 – False Designations of Origin, False Descriptions, and Dilution Forbidden Courts weigh factors like whether the registrant offered to sell the domain at an inflated price, gave false contact information at registration, or has a pattern of grabbing other companies’ trademarks. A ruling in your favor can transfer or cancel the domain and award statutory damages between $1,000 and $100,000 per domain, with attorney’s fees available in exceptional cases.7Office of the Law Revision Counsel. 15 USC 1117 – Recovery for Violation of Rights The ACPA costs more time and money than a UDRP filing, but it’s the only route to actual damages.